Dispatch● published
Building a Threat-Intel Pipeline: KEV + EPSS in Production
Six explicit stages, a scorer that refuses to trust CVSS on its own, and what it actually takes to turn nineteen feeds into three digests a day without drowning in noise.
[ operator log — one-person security lab ]
Keval Chhatbar
Detection & response engineer, financial services · CISSP, GCIH · London, Ontario
I research AI-assisted security operations by building and running the whole stack myself — a 30-service lab, two Proxmox nodes, one operator — then publish the field notes, wrong turns included.
FEATURED
AI Homelab● published
The AI Homelab, Two Years In: A Build Note
Thirty-plus services, two Proxmox nodes, one operator, and the two outages that taught me more than any tutorial did.
Project● live
Kali MCP
24 pentest tools behind a Model Context Protocol server — CIDR allowlist, destructive-action confirmation, full audit trail.
WRITING INDEX
// Blue Team Homelab
SOC architecture, threat hunting, detection-as-code, SOAR — six parts.
// Start Your AI Homelab
Standing up a real, multi-node research lab from nothing — six parts.
// Dispatches
Field reports and topical write-ups, latest first.